ClawHub
Back to skill

Security audit

Grandpa.skill

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local memory-preservation template for a grandfather, with disclosed local storage and no evidence of hidden commands or data transmission.

Before installing, understand that the skill is meant to store personal family memories locally. Review the local folder it creates if you use it, and avoid entering details you would not want stored on the device.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Hidden Instructions

High
Category
Prompt Injection
Content
- 👴 **grandpa.skill** — His stories and strength ← You are here

Family tier:
- 👩 [mom.skill](https://clawhub.ai/realteamprinz/mom) · 👨 [dad.skill](https://clawhub.ai/realteamprinz/dad) · 👨‍👩‍👧 [parent.skill](https://clawhub.ai/realteamprinz/parent)

Peer tier:
- 🤜 [brother.skill](https://clawhub.ai/realteamprinz/brother) · 💅 [sister.skill](https://clawhub.ai/realteamprinz/sister) · 💘 [date.skill](https://clawhub.ai/realteamprinz/date)
Confidence
60% confidence
Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High
Category
Prompt Injection
Content
- 👴 **grandpa.skill** — His stories and strength ← You are here

Family tier:
- 👩 [mom.skill](https://clawhub.ai/realteamprinz/mom) · 👨 [dad.skill](https://clawhub.ai/realteamprinz/dad) · 👨‍👩‍👧 [parent.skill](https://clawhub.ai/realteamprinz/parent)

Peer tier:
- 🤜 [brother.skill](https://clawhub.ai/realteamprinz/brother) · 💅 [sister.skill](https://clawhub.ai/realteamprinz/sister) · 💘 [date.skill](https://clawhub.ai/realteamprinz/date)
Confidence
60% confidence
Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Static analysis

No suspicious patterns detected.